@phuetz/code-buddy 0.1.25 → 0.1.26

package/dist/channels/pro/run-commands.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Run Commands
+ *
+ * Handles /runs and /run <id> commands, providing timeline views,
+ * re-run, test re-run, and rollback functionality.
+ * Channel-agnostic - returns structured data for formatters.
+ */
+import type { RunTracker } from './run-tracker.js';
+import type { ScopedAuthManager } from './scoped-auth.js';
+import type { RunRecord, RunStep } from './types.js';
+/**
+ * Handles run-related commands and callbacks.
+ */
+export declare class RunCommands {
+    private runTracker;
+    private authManager?;
+    constructor(runTracker: RunTracker, authManager?: ScopedAuthManager | undefined);
+    /**
+     * Handle /runs command - list recent runs (returns structured data)
+     */
+    handleRunsList(_chatId: string, _userId: string, limit?: number): {
+        runs: RunRecord[];
+    };
+    /**
+     * Handle /run <id> command - show run detail (returns structured data)
+     */
+    handleRunDetail(_chatId: string, runId: string): {
+        run: RunRecord;
+        testSteps: RunStep[];
+        commitRefs: string[];
+    } | null;
+    /**
+     * Handle re-run request
+     */
+    handleRerun(runId: string, userId: string, _chatId: string): Promise<{
+        text: string;
+        objective?: string;
+    }>;
+    /**
+     * Handle re-run tests from a run
+     */
+    handleRerunTests(runId: string, userId: string, _chatId: string): Promise<{
+        text: string;
+        commands?: string[];
+    }>;
+    /**
+     * Handle rollback request
+     */
+    handleRollback(runId: string, userId: string, _chatId: string): Promise<{
+        text: string;
+        needsConfirm?: boolean;
+        confirmId?: string;
+        commitRef?: string;
+    }>;
+    /**
+     * Find a run by full or partial ID
+     */
+    private findRun;
+}

package/dist/channels/pro/run-commands.js

@@ -0,0 +1,122 @@
+/**
+ * Run Commands
+ *
+ * Handles /runs and /run <id> commands, providing timeline views,
+ * re-run, test re-run, and rollback functionality.
+ * Channel-agnostic - returns structured data for formatters.
+ */
+/**
+ * Handles run-related commands and callbacks.
+ */
+export class RunCommands {
+    runTracker;
+    authManager;
+    constructor(runTracker, authManager) {
+        this.runTracker = runTracker;
+        this.authManager = authManager;
+    }
+    /**
+     * Handle /runs command - list recent runs (returns structured data)
+     */
+    handleRunsList(_chatId, _userId, limit = 10) {
+        const runs = this.runTracker.listRuns(limit);
+        return { runs };
+    }
+    /**
+     * Handle /run <id> command - show run detail (returns structured data)
+     */
+    handleRunDetail(_chatId, runId) {
+        const run = this.findRun(runId);
+        if (!run)
+            return null;
+        const testSteps = this.runTracker.getTestSteps(run.id);
+        const commitRefs = this.runTracker.getCommitRefs(run.id);
+        return { run, testSteps, commitRefs };
+    }
+    /**
+     * Handle re-run request
+     */
+    async handleRerun(runId, userId, _chatId) {
+        const run = this.findRun(runId);
+        if (!run) {
+            return { text: 'Run not found.' };
+        }
+        if (this.authManager) {
+            const decision = this.authManager.checkScope(userId, 'run-tests');
+            if (!decision.allowed) {
+                return { text: `Permission denied: ${decision.reason}` };
+            }
+        }
+        return {
+            text: `Re-running: ${run.objective}`,
+            objective: run.objective,
+        };
+    }
+    /**
+     * Handle re-run tests from a run
+     */
+    async handleRerunTests(runId, userId, _chatId) {
+        const run = this.findRun(runId);
+        if (!run) {
+            return { text: 'Run not found.' };
+        }
+        if (this.authManager) {
+            const decision = this.authManager.checkScope(userId, 'run-tests');
+            if (!decision.allowed) {
+                return { text: `Permission denied: ${decision.reason}` };
+            }
+        }
+        const testSteps = this.runTracker.getTestSteps(run.id);
+        if (testSteps.length === 0) {
+            return { text: 'No test commands found in this run.' };
+        }
+        const commands = testSteps
+            .map((s) => s.args.command)
+            .filter(Boolean);
+        return {
+            text: `Re-running ${commands.length} test command(s)...`,
+            commands,
+        };
+    }
+    /**
+     * Handle rollback request
+     */
+    async handleRollback(runId, userId, _chatId) {
+        const run = this.findRun(runId);
+        if (!run) {
+            return { text: 'Run not found.' };
+        }
+        if (this.authManager) {
+            const decision = this.authManager.checkScope(userId, 'deploy');
+            if (!decision.allowed) {
+                return { text: `Permission denied: requires 'deploy' scope. ${decision.reason || ''}` };
+            }
+            const confirm = this.authManager.requireDoubleConfirm(userId, 'rollback', `Rollback run ${runId} to previous state`);
+            return {
+                text: `Rollback requires confirmation. Press confirm within 2 minutes.`,
+                needsConfirm: true,
+                confirmId: confirm.id,
+                commitRef: this.runTracker.getCommitRefs(run.id)[0],
+            };
+        }
+        const commits = this.runTracker.getCommitRefs(run.id);
+        if (commits.length === 0) {
+            return { text: 'No commit refs found for rollback.' };
+        }
+        return {
+            text: `Ready to rollback to before ${commits[0]}`,
+            commitRef: commits[0],
+        };
+    }
+    /**
+     * Find a run by full or partial ID
+     */
+    findRun(idOrPartial) {
+        let run = this.runTracker.getRun(idOrPartial);
+        if (run)
+            return run;
+        const runs = this.runTracker.listRuns(100);
+        return runs.find((r) => r.id.startsWith(idOrPartial) || r.id.includes(idOrPartial));
+    }
+}
+//# sourceMappingURL=run-commands.js.map

package/dist/channels/pro/run-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-commands.js","sourceRoot":"","sources":["../../../src/channels/pro/run-commands.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;GAEG;AACH,MAAM,OAAO,WAAW;IAEZ;IACA;IAFV,YACU,UAAsB,EACtB,WAA+B;QAD/B,eAAU,GAAV,UAAU,CAAY;QACtB,gBAAW,GAAX,WAAW,CAAoB;IACtC,CAAC;IAEJ;;OAEG;IACH,cAAc,CACZ,OAAe,EACf,OAAe,EACf,QAAgB,EAAE;QAElB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,eAAe,CACb,OAAe,EACf,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEzD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,KAAa,EACb,MAAc,EACd,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,IAAI,EAAE,sBAAsB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,eAAe,GAAG,CAAC,SAAS,EAAE;YACpC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,MAAc,EACd,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,IAAI,EAAE,sBAAsB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS;aACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAiB,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,OAAO;YACL,IAAI,EAAE,cAAc,QAAQ,CAAC,MAAM,qBAAqB;YACxD,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,MAAc,EACd,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,IAAI,EAAE,+CAA+C,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;YAC1F,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,oBAAoB,CACnD,MAAM,EACN,UAAU,EACV,gBAAgB,KAAK,oBAAoB,CAC1C,CAAC;YAEF,OAAO;gBACL,IAAI,EAAE,iEAAiE;gBACvE,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aACpD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC;QACxD,CAAC;QAED,OAAO;YACL,IAAI,EAAE,+BAA+B,OAAO,CAAC,CAAC,CAAC,EAAE;YACjD,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,WAAmB;QACjC,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAClE,CAAC;IACJ,CAAC;CACF"}

package/dist/channels/pro/run-tracker.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Run Tracker
+ *
+ * Records agent execution runs with step-by-step timelines,
+ * artifacts, and cost tracking. Supports replay and rollback.
+ * Channel-agnostic - formatting is handled by the ChannelProFormatter.
+ */
+import type { RunStatus, RunStep, RunArtifact, RunRecord } from './types.js';
+/**
+ * Tracks agent execution runs with detailed timelines.
+ */
+export declare class RunTracker {
+    private runs;
+    private activeRunId;
+    private runsDir;
+    constructor(runsDir?: string);
+    /**
+     * Start a new run
+     */
+    startRun(sessionId: string, objective: string, options?: {
+        chatId?: string;
+        userId?: string;
+    }): RunRecord;
+    /**
+     * Add a step to the active run
+     */
+    addStep(runId: string, toolName: string, args: Record<string, unknown>, options?: {
+        turnId?: number;
+    }): RunStep;
+    /**
+     * Complete a step with its result
+     */
+    completeStep(runId: string, stepId: string, result: string, success: boolean, filesChanged?: string[]): void;
+    /**
+     * Add an artifact to a run
+     */
+    addArtifact(runId: string, artifact: RunArtifact): void;
+    /**
+     * Update token count and cost
+     */
+    updateUsage(runId: string, tokenCount: number, cost: number): void;
+    /**
+     * End a run
+     */
+    endRun(runId: string, status: RunStatus): RunRecord | undefined;
+    /**
+     * Get the active run
+     */
+    getActiveRun(): RunRecord | undefined;
+    /**
+     * Get a run by ID
+     */
+    getRun(id: string): RunRecord | undefined;
+    /**
+     * List runs, most recent first
+     */
+    listRuns(limit?: number): RunRecord[];
+    /**
+     * Get test steps from a run (for re-running tests)
+     */
+    getTestSteps(runId: string): RunStep[];
+    /**
+     * Get the git commit refs from a run (for rollback)
+     */
+    getCommitRefs(runId: string): string[];
+    static getStatusIcon(status: RunStatus): string;
+    static formatDuration(start: number, end?: number): string;
+    static formatArgs(args: Record<string, unknown>): string;
+    static truncate(str: string, maxLen: number): string;
+    private ensureDir;
+    private saveRun;
+    private loadAll;
+    private pruneOldRuns;
+}

package/dist/channels/pro/run-tracker.js

@@ -0,0 +1,252 @@
+/**
+ * Run Tracker
+ *
+ * Records agent execution runs with step-by-step timelines,
+ * artifacts, and cost tracking. Supports replay and rollback.
+ * Channel-agnostic - formatting is handled by the ChannelProFormatter.
+ */
+import { readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync, unlinkSync } from 'fs';
+import { join } from 'path';
+import os from 'os';
+import { randomBytes } from 'crypto';
+/** Max runs to retain */
+const MAX_RUNS = 100;
+/**
+ * Tracks agent execution runs with detailed timelines.
+ */
+export class RunTracker {
+    runs = new Map();
+    activeRunId = null;
+    runsDir;
+    constructor(runsDir) {
+        this.runsDir = runsDir || join(os.homedir(), '.codebuddy', 'channel-runs');
+        this.ensureDir();
+        this.loadAll();
+    }
+    /**
+     * Start a new run
+     */
+    startRun(sessionId, objective, options) {
+        const id = `run_${Date.now().toString(36)}_${randomBytes(3).toString('hex')}`;
+        const run = {
+            id,
+            sessionId,
+            objective,
+            status: 'running',
+            steps: [],
+            artifacts: [],
+            tokenCount: 0,
+            totalCost: 0,
+            startedAt: Date.now(),
+            chatId: options?.chatId,
+            userId: options?.userId,
+        };
+        this.runs.set(id, run);
+        this.activeRunId = id;
+        this.saveRun(run);
+        this.pruneOldRuns();
+        return run;
+    }
+    /**
+     * Add a step to the active run
+     */
+    addStep(runId, toolName, args, options) {
+        const run = this.runs.get(runId);
+        if (!run)
+            throw new Error(`Run ${runId} not found`);
+        const step = {
+            stepId: `step_${run.steps.length + 1}`,
+            toolName,
+            args,
+            startedAt: Date.now(),
+            turnId: options?.turnId,
+        };
+        run.steps.push(step);
+        return step;
+    }
+    /**
+     * Complete a step with its result
+     */
+    completeStep(runId, stepId, result, success, filesChanged) {
+        const run = this.runs.get(runId);
+        if (!run)
+            return;
+        const step = run.steps.find((s) => s.stepId === stepId);
+        if (!step)
+            return;
+        step.result = result;
+        step.success = success;
+        step.endedAt = Date.now();
+        step.filesChanged = filesChanged;
+        this.saveRun(run);
+    }
+    /**
+     * Add an artifact to a run
+     */
+    addArtifact(runId, artifact) {
+        const run = this.runs.get(runId);
+        if (!run)
+            return;
+        run.artifacts.push(artifact);
+        this.saveRun(run);
+    }
+    /**
+     * Update token count and cost
+     */
+    updateUsage(runId, tokenCount, cost) {
+        const run = this.runs.get(runId);
+        if (!run)
+            return;
+        run.tokenCount = tokenCount;
+        run.totalCost = cost;
+    }
+    /**
+     * End a run
+     */
+    endRun(runId, status) {
+        const run = this.runs.get(runId);
+        if (!run)
+            return undefined;
+        run.status = status;
+        run.endedAt = Date.now();
+        if (this.activeRunId === runId) {
+            this.activeRunId = null;
+        }
+        this.saveRun(run);
+        return run;
+    }
+    /**
+     * Get the active run
+     */
+    getActiveRun() {
+        if (!this.activeRunId)
+            return undefined;
+        return this.runs.get(this.activeRunId);
+    }
+    /**
+     * Get a run by ID
+     */
+    getRun(id) {
+        return this.runs.get(id);
+    }
+    /**
+     * List runs, most recent first
+     */
+    listRuns(limit = 20) {
+        return Array.from(this.runs.values())
+            .sort((a, b) => b.startedAt - a.startedAt)
+            .slice(0, limit);
+    }
+    /**
+     * Get test steps from a run (for re-running tests)
+     */
+    getTestSteps(runId) {
+        const run = this.runs.get(runId);
+        if (!run)
+            return [];
+        return run.steps.filter((s) => s.toolName === 'bash' &&
+            (typeof s.args.command === 'string') &&
+            /\b(test|jest|pytest|mocha|vitest|npm\s+test)\b/i.test(s.args.command));
+    }
+    /**
+     * Get the git commit refs from a run (for rollback)
+     */
+    getCommitRefs(runId) {
+        const run = this.runs.get(runId);
+        if (!run)
+            return [];
+        return run.artifacts
+            .filter((a) => a.type === 'commit' && a.ref)
+            .map((a) => a.ref);
+    }
+    // Static utility methods (used by formatters)
+    static getStatusIcon(status) {
+        switch (status) {
+            case 'running': return '[RUN]';
+            case 'completed': return '[DONE]';
+            case 'failed': return '[FAIL]';
+            case 'cancelled': return '[STOP]';
+            case 'rolled_back': return '[UNDO]';
+        }
+    }
+    static formatDuration(start, end) {
+        const ms = (end || Date.now()) - start;
+        if (ms < 1000)
+            return `${ms}ms`;
+        if (ms < 60000)
+            return `${(ms / 1000).toFixed(1)}s`;
+        const mins = Math.floor(ms / 60000);
+        const secs = Math.floor((ms % 60000) / 1000);
+        return `${mins}m${secs}s`;
+    }
+    static formatArgs(args) {
+        if (typeof args.command === 'string') {
+            return RunTracker.truncate(args.command, 80);
+        }
+        if (typeof args.path === 'string') {
+            return args.path;
+        }
+        const keys = Object.keys(args);
+        if (keys.length === 0)
+            return '';
+        return RunTracker.truncate(JSON.stringify(args), 80);
+    }
+    static truncate(str, maxLen) {
+        if (str.length <= maxLen)
+            return str;
+        return str.slice(0, maxLen - 3) + '...';
+    }
+    ensureDir() {
+        if (!existsSync(this.runsDir)) {
+            mkdirSync(this.runsDir, { recursive: true });
+        }
+    }
+    saveRun(run) {
+        try {
+            const filePath = join(this.runsDir, `${run.id}.json`);
+            writeFileSync(filePath, JSON.stringify(run, null, 2));
+        }
+        catch {
+            // Silently fail
+        }
+    }
+    loadAll() {
+        try {
+            if (!existsSync(this.runsDir))
+                return;
+            const files = readdirSync(this.runsDir).filter((f) => f.endsWith('.json'));
+            for (const file of files) {
+                try {
+                    const data = JSON.parse(readFileSync(join(this.runsDir, file), 'utf-8'));
+                    this.runs.set(data.id, data);
+                }
+                catch {
+                    // Skip malformed files
+                }
+            }
+        }
+        catch {
+            // Ignore
+        }
+    }
+    pruneOldRuns() {
+        if (this.runs.size <= MAX_RUNS)
+            return;
+        const sorted = Array.from(this.runs.entries())
+            .sort((a, b) => b[1].startedAt - a[1].startedAt);
+        const toRemove = sorted.slice(MAX_RUNS);
+        for (const [id] of toRemove) {
+            this.runs.delete(id);
+            try {
+                const filePath = join(this.runsDir, `${id}.json`);
+                if (existsSync(filePath)) {
+                    unlinkSync(filePath);
+                }
+            }
+            catch {
+                // Ignore
+            }
+        }
+    }
+}
+//# sourceMappingURL=run-tracker.js.map

package/dist/channels/pro/run-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-tracker.js","sourceRoot":"","sources":["../../../src/channels/pro/run-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACjG,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAGrC,yBAAyB;AACzB,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB;;GAEG;AACH,MAAM,OAAO,UAAU;IACb,IAAI,GAA2B,IAAI,GAAG,EAAE,CAAC;IACzC,WAAW,GAAkB,IAAI,CAAC;IAClC,OAAO,CAAS;IAExB,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,SAAiB,EACjB,SAAiB,EACjB,OAA8C;QAE9C,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAE9E,MAAM,GAAG,GAAc;YACrB,EAAE;YACF,SAAS;YACT,SAAS;YACT,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,OAAO,CACL,KAAa,EACb,QAAgB,EAChB,IAA6B,EAC7B,OAA6B;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAEpD,MAAM,IAAI,GAAY;YACpB,MAAM,EAAE,QAAQ,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;YACtC,QAAQ;YACR,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC;QAEF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,YAAY,CACV,KAAa,EACb,MAAc,EACd,MAAc,EACd,OAAgB,EAChB,YAAuB;QAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QAEjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAa,EAAE,QAAqB;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAa,EAAE,UAAkB,EAAE,IAAY;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC5B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAa,EAAE,MAAiB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAE3B,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB,EAAE;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM;YAC1B,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;YACpC,iDAAiD,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAiB,CAAC,CACnF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,SAAS;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;aAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC;IACxB,CAAC;IAED,8CAA8C;IAE9C,MAAM,CAAC,aAAa,CAAC,MAAiB;QACpC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC;YAC/B,KAAK,WAAW,CAAC,CAAC,OAAO,QAAQ,CAAC;YAClC,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;YAC/B,KAAK,WAAW,CAAC,CAAC,OAAO,QAAQ,CAAC;YAClC,KAAK,aAAa,CAAC,CAAC,OAAO,QAAQ,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,KAAa,EAAE,GAAY;QAC/C,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QACvC,IAAI,EAAE,GAAG,IAAI;YAAE,OAAO,GAAG,EAAE,IAAI,CAAC;QAChC,IAAI,EAAE,GAAG,KAAK;YAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7C,OAAO,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,IAA6B;QAC7C,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAc;QACzC,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM;YAAE,OAAO,GAAG,CAAC;QACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC1C,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAc;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YACtD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;IACH,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO;YACtC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;oBACzE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ;YAAE,OAAO;QAEvC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAClD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/channels/pro/scoped-auth.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Scoped Authorization Manager
+ *
+ * Enterprise-grade permission model for channel interactions.
+ * Supports tiered scopes, secret handles, temporary access, and double confirmation.
+ * Channel-agnostic - works with any channel adapter.
+ */
+import type { AuthScope, AuthDecision, ScopedPermission, SecretHandle, PendingConfirm, TemporaryAccess, ScopeCheckContext } from './types.js';
+/**
+ * Manages scoped authorization for channel users.
+ */
+export declare class ScopedAuthManager {
+    private permissions;
+    private secrets;
+    private temporaryAccess;
+    private pendingConfirms;
+    private configPath;
+    private adminUsers;
+    /** Confirmation timeout in ms (default 2 minutes) */
+    private confirmTimeoutMs;
+    constructor(adminUsers?: string[], configDir?: string);
+    /**
+     * Check if a user has the required scope
+     */
+    checkScope(userId: string, scope: AuthScope, context?: ScopeCheckContext): AuthDecision;
+    /**
+     * Grant scopes to a user
+     */
+    grantScope(userId: string, scopes: AuthScope[], options?: {
+        repos?: string[];
+        folders?: string[];
+        denyCommands?: string[];
+        ttlMs?: number;
+        grantedBy?: string;
+    }): ScopedPermission;
+    /**
+     * Revoke all scopes from a user
+     */
+    revokeScope(userId: string): boolean;
+    /**
+     * Get permissions for a user
+     */
+    getPermission(userId: string): ScopedPermission | undefined;
+    /**
+     * List all permissions
+     */
+    listPermissions(): ScopedPermission[];
+    /**
+     * Register a secret handle (maps friendly name to env var)
+     */
+    registerSecret(handle: string, envVar: string, description?: string): SecretHandle;
+    /**
+     * Resolve a secret handle to its value (from env)
+     */
+    resolveSecret(handle: string): string | undefined;
+    /**
+     * List secret handles (never exposes values)
+     */
+    listHandles(): Array<{
+        handle: string;
+        description?: string;
+        hasValue: boolean;
+    }>;
+    /**
+     * Remove a secret handle
+     */
+    removeSecret(handle: string): boolean;
+    /**
+     * Grant temporary full access to a user
+     */
+    grantTemporaryFullAccess(userId: string, durationMs: number, grantedBy?: string): TemporaryAccess;
+    /**
+     * Revoke temporary access
+     */
+    revokeTemporaryAccess(userId: string): boolean;
+    /**
+     * Require double confirmation for a risky operation
+     */
+    requireDoubleConfirm(userId: string, operation: string, details?: string): PendingConfirm;
+    /**
+     * Verify a double confirmation
+     */
+    verifyDoubleConfirm(confirmId: string, userId: string): {
+        valid: boolean;
+        reason?: string;
+    };
+    /**
+     * Check if user is an admin
+     */
+    isAdmin(userId: string): boolean;
+    /**
+     * Clean up expired entries
+     */
+    cleanup(): void;
+    private load;
+    private save;
+}